工銀亞洲 | Announcement

Enhanced Login authentication mechanism for Personal Electronic Banking

To further enhance the security of electronic banking services, starting from 1 June 2026, ICBC (Asia) will upgrade the login authentication mechanism for personal e-banking and mobile banking. Customer will be required to use two-factors authentication when logging in. 


  • For customers logging in with "the Mobile Token" , the current login process will remain unchanged.
  • For customers logging in with "Account Number/ Alias + Password" , the system will automatically send a one-time SMS verification code to the mobile phone number registered with the bank. Customers required to additionally enter the  verification code to complete the login. On the first login, if "Trust this device" is selected, subsequent logins on the same device may be exempted from repeated verification. 

If you have changed your mobile number but have not updated it with the bank, please update it immediately via personal e-banking or mobile banking. Otherwise, you will be unable to receive the SMS verification codes and must visit a branch in person to update your mobile phone number before continuing to use electronic banking services.


In addition, starting from 1 June 2026, the gesture login function will be fully discontinued. Customers are advised to use other login methods to continue accessing Personal Mobile Banking services.

更多資訊 更多资讯 More Details
enhanced login authenitcation mechanism for cib mb

From 29 May 2026 onwards, the Bank will implement an upgrade to the login process for Commercial Internet Banking and Mobile Banking by introducing an additional authentication measure to enhance security of our electronic banking services. Details are as follows.


  1. Commercial Internet Banking Login
    After entering the userID and password, Commercial Internet Banking customers must additionally provide one of the following for authentication: 'Email OTP', 'SMS OTP', 'Dynamic Password from Password Token', or 'Password of Digital Security Key' to complete the login authentication process. If the customer does not log in using the same browser within 90 days, the above authentication process must be repeated.
  2. Commercial Mobile Banking Login
    Users who have activated 'Digital Security Key', 'Fingerprint', 'FaceID' login feature can log in the Commercial Mobile Banking directly.  Users without these features enabled must additionally provide either an 'Email OTP' or an 'SMS OTP' for authentication process.

Important Notes:
To facilitate the successful login our electronic banking services, please activate your Digital Security Key in advance, and ensure that your Password Token, registered email address and mobile number are valid and functioning properly.

更多資訊 更多资讯 More Details
Warm Reminder - Beware of Phishing Scam

Dear Valued Customer,


Industrial and Commercial Bank of China (Asia) Limited (“the Bank”) would like to remind customers and the general public to be vigilant against phishing messages and do not disclose your personal information or bank account and password to third parties. 


  • Do not click or open any hyperlink, attachment or QR code in the suspicious email or SMS message, even if SMS Sender IDs” with prefix “#”.
  • The Bank would never proactively ask for your sensitive personal information such as bank account details, Internet Banking username, login passwords or one-time passwords (OTP) through phone calls, emails, electronic communications (e.g. SMS messages, WhatsApp, WeChat, Facebook Messenger, etc), third party websites, QR Codes or attachments, etc.
  • If you find any suspicious calls, emails or SMS messages, you should contact the Bank at (852) 218 95588 immediately.

更多資訊 更多资讯 More Details
Warm Reminder - Beware of Phishing Scam and Do Not Disclose Your Personal Information

Dear Valued Customer,


Recently, fraudsters have tried to trick customers into revealing personal information by sending them forged bank letters or websites. Industrial and Commercial Bank of China (Asia) Limited (“the Bank”) would like to remind customers and the general public to be vigilant against phishing messages and do not disclose your personal information or bank account and password to third parties. To protect your personal interests, please read the following information:


Phishing is a type of online scam, in which fraudsters send you a phishing email or text message impersonating legitimate organisations such as the government, banks, mobile service provider, online payment service providers, online retailers, with links or QR codes directing to phishing websites which look like the genuine websites of relevant organisations. The fraudsters would trick the recipients to input sensitive personal information including account number and password, personal details, credit card number and etc. The phishing messages may also include a malicious hyperlink, attachment, QR code or files, which results in hacking activities and malware attack to steal recipients’ personal information if they click on the link or open the attachment indiscriminately.


How to identify phishing emails or SMS messages:

  • Fictitious messages are usually in the name of special offers, unusual large transaction instructions or bill payment, to lure the customers.
  • Include a hyperlink requesting you to log on or input sensitive personal information.
  • Pay attention to the email subject and phone number. Check if there is anything unusual regarding the domain of the email address and the content such as inconsistency, grammar error or spelling mistake.
  • The fraudulent website has a different look from the genuine website and some of the links of the fraudulent website may be broken.

In order to protect your own interests, the Bank reminds customer and the general public:

  1. Do not logon to your ICBC (Asia) Online Banking Services or Mobile Banking through third party platform (e.g.Carousell,Facebook,WhatsApp,etc.,) You should always access our Online Banking Services by typing our Bank's official website address directly into your browser.
  2. Do not click or open any hyperlink, attachment or QR code in the suspicious email or SMS message.
  3. Be vigilant about the content of the email or SMS message, especially the hyperlinks and contact details provided for verification purpose.
  4. Do not enter your personal information in websites or software applications from unknown sources.
  5. The Bank will never proactively ask you to provide any personal information by email or SMS message, nor will the Bank ask you to click on a hyperlink, QR code, attachment in the email or SMS message to disclose your sensitive information including bank account details, login password or one-time password.
  6. The Bank has participated in the “SMS Sender Registration Scheme”, and use “Registered SMS Sender IDs” with prefix “#” to send SMS to the customers, including “#ICBCAOTP” and “#ICBCAsia”.
  7. Regularly change online banking password and enhance the security of e-banking, e.g. enabling the two-factor authentication or biometric authentication function.
  8. Customers can enter the suspicious email address, contact number or website link on the “Scameter” search engine launched by the Hong Kong Police Force to assess the risk of fraud.
  9. If there is a fraud risk report alert message displayed while the customer is making transaction through online banking, mobile banking or ATM, please stop making any transactions and verify the identity of the third party.

If you doubt of the authenticity of emails, SMS messages or websites claiming to be from the Bank, please refer to the information on the Bank’s official website. If you confirm that you have received phishing messages and have already disclosed personal information and sensitive account information, or if you suspect your account has been misused, please change your bank account password immediately or suspend the online banking service. Please check your transaction record promptly and if you identify any unauthorised transactions, please call the Bank’s hotline at 2189 5588 or visit our branch nearby for reporting, and immediately contact Hong Kong Police Force.


For more information, please refer to the official website of Anti-Deception Coordination Centre and the official website of CyberDefender.


Beware of Phishing Scam and Do Not Disclose Your Personal Information

更多資訊 更多资讯 More Details
Customer Reminder - Bogus Voice Message Phone Calls or Bogus Bank Hotline Numbers

The Industrial and Commercial Bank of China (Asia) Limited (the “Bank”) would like to remind customers to pay attention to the trend of bogus voice message phone calls or bogus bank hotline numbers. Please protect your sensitive personal information at all times in order to avoid your information being stolen for an unlawful purpose. From the relevant sources, fraudsters may claim to be from a well-known organization (e.g. use the application software to impersonate the legitimate hotline number of that organization to approach customers) or may send fraudulent SMS messages purportedly to be sent from the Bank which request customers to call a bogus bank hotline number mentioned in the messages to check the credit card transactions.


The Bank would like to remind customers that the Bank never asks customers to provide personal information (including login passwords or one-time passwords) by phone, e-mail, SMS message or voice message system even during direct marketing call. Also, customers should never call the bogus bank hotline number mentioned in the messages and reveal sensitive personal information. If customers received any suspected call related to the Bank, please contact our Customer Service Hotline and provide the caller name and his/her phone number for verification. If you wish the Bank not to use your personal data for direct marketing purpose, please also contact the Bank’s Customer Service Hotline for details. It is free of charge for the arrangement of stop using your personal data for direct marketing purpose. If customers seek to verify the Bank’s hotline number, please follow the official information (e.g. at the back of ATM/credit cards, on the Bank’s website, or Bank’s hotline numbers at the dedicated webpages of the Hong Kong Monetary Authority and the Hong Kong Association of Banks).


If customers have provided, or suspected that they have provided, personal information to bogus voice message phone calls or bogus bank hotline numbers should immediately contact the Bank and report such cases to any local Police Station or the Hong Kong Police Force (at 2860 5012).


Customer Service Hotline: 2189-5588
Please press 3-7-9 (9:00a.m. – 8:00p.m.)
Please press 3-6-9 (24 hours)


For more details to safeguard yourself from bogus calls, please press here to watch the TV Announcement in the Public Interest (API) jointly produced by the Hong Kong Monetary Authority and the Hong Kong Association of Banks and relevant materials to understand how to safeguard yourself from bogus calls purported from banks.

更多資訊 更多资讯 More Details

  • eTools

Products & Services Highlights

We offer a wide range of investment services to satisfy your investment needs.

Security Tips